A Cost, Benefit and Risk Evaluation of the .NET Passport Single Signon Protocol

摘要

.NET Passport is a password-based single sign-in service that lets users visit multiple Web sites without having to authenticate at each site. .NET Passport is an example implementation of the broad paradigm of Identity Management. . NET Passport was released in 1999 and was initially widely deployed and enthusiastically received by Web users and Web service owners. In recent times, however, the popularity of .NET Passport has declined markedly. A cost, benefit and risk analysis of .NET Passport produces many useful lessons in relation to the evolution of Identity Management strategies.